Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/15B4BB8D00708B865A04094E47913761287812EA.cer
File:                     15B4BB8D00708B865A04094E47913761287812EA.cer (raw, json)
Hash identifier:          y5Li4yqcpUnp9Zl1b74O6FIMhxbOF5DOQ63nWRbKCq4=
Subject key identifier:   15:B4:BB:8D:00:70:8B:86:5A:04:09:4E:47:91:37:61:28:78:12:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4F148CC18FAC02C428BA388BE54A7DAEFE37E01F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/15B4BB8D00708B865A04094E47913761287812EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Feb 2025 19:36:51 +0000
Certificate not after:    Fri 27 Feb 2026 19:41:51 +0000
Subordinate resources:    AS: 271502
                          IP: 181.189.124.0/22
                          IP: 2804:7c88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:14:8c:c1:8f:ac:02:c4:28:ba:38:8b:e5:4a:7d:ae:fe:37:e0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 28 19:36:51 2025 GMT
            Not After : Feb 27 19:41:51 2026 GMT
        Subject: CN=15B4BB8D00708B865A04094E47913761287812EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:3c:9f:d9:e8:56:67:90:e1:aa:4b:9b:94:
                    21:c2:a5:4c:1f:6e:69:be:00:29:5d:f2:52:1b:54:
                    e4:27:c0:b0:4e:71:f9:74:eb:ed:4c:07:db:5c:4f:
                    37:3f:01:36:d0:eb:f7:7f:1f:2e:cd:eb:5f:68:0a:
                    ed:fb:7e:d4:9e:8d:6e:cb:4a:fb:7c:28:ae:19:84:
                    e7:68:63:14:b5:fd:b7:8f:8f:37:6f:35:06:be:bf:
                    29:13:89:07:ba:3e:84:48:64:8a:4c:b7:bb:f6:f9:
                    84:2c:9c:3f:77:00:96:7c:46:07:de:74:27:aa:3a:
                    fc:ea:9a:60:eb:79:e0:f0:2d:e9:51:a8:df:f1:59:
                    47:8b:fd:6c:eb:22:42:89:ed:c4:45:3a:05:b1:99:
                    c7:29:3c:4b:ed:22:c9:6b:cd:d4:87:ee:c8:a4:fc:
                    e3:9f:ff:7e:75:a1:e9:60:d0:b8:84:e4:b3:0b:fa:
                    ba:b2:d3:01:34:cf:1d:77:7c:95:71:8d:b9:30:98:
                    d5:9d:85:32:86:5e:f4:65:4e:eb:8a:fc:8e:d2:80:
                    b1:8f:bd:a6:1f:17:05:71:84:32:aa:61:ee:4f:fe:
                    7b:88:40:65:2a:a4:fb:c6:b6:14:aa:e0:80:66:ad:
                    3f:45:12:cd:55:7f:46:6e:88:66:0f:57:82:23:8d:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:B4:BB:8D:00:70:8B:86:5A:04:09:4E:47:91:37:61:28:78:12:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/1/15B4BB8D00708B865A04094E47913761287812EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.124.0/22
                IPv6:
                  2804:7c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271502

    Signature Algorithm: sha256WithRSAEncryption
         1d:85:76:27:ab:f3:e2:7d:26:b8:8c:6f:b6:ac:a8:0b:f5:cc:
         fd:a8:2c:ed:9c:bd:e9:aa:11:76:96:6a:68:c0:29:6d:2e:e6:
         0c:39:24:3c:fd:9b:ca:4f:c1:03:26:4b:1d:de:b0:fa:3f:0e:
         f6:fa:49:a8:f0:1e:ef:b5:37:f9:ec:d6:81:4f:49:cc:99:19:
         e8:da:49:f8:4f:b7:11:bf:e2:5f:27:bc:7e:b7:65:33:59:e1:
         1b:ef:d7:50:cd:1d:09:28:df:15:8b:0c:02:f6:25:4c:09:18:
         35:89:aa:54:f7:16:79:92:82:1b:a7:0f:08:b5:83:c4:80:b7:
         76:81:42:dd:9e:52:d5:34:4c:5a:af:7f:d2:40:d0:ef:01:a6:
         e4:df:29:5c:1c:38:80:9c:12:3d:15:ac:c8:13:f2:5e:21:e7:
         d7:4c:9e:f7:d5:4f:a0:78:97:ee:66:f2:8a:f4:b7:1a:2e:14:
         c9:13:2b:02:fe:43:45:5c:b8:c1:c6:a0:8c:ce:73:f6:a9:25:
         57:a9:6f:69:b8:36:bd:a0:06:7c:ba:1c:08:6a:2b:12:7d:48:
         a3:58:53:37:e9:06:cd:6a:c9:72:ba:89:1f:89:80:65:73:35:
         89:54:93:e2:05:72:73:77:d7:d5:cb:14:b9:5a:a3:59:60:d5:
         67:b7:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:17 2025 by rpki-client